A virtual machine security protection method and system based on big data and machine learning

Abstract

The invention discloses a virtual machine security protection method based on big data and machine learning, belonging to the field of security protection. The method includes: firstly, extracting a common file and a browser file in an NTFS file system from a virtual disk of the virtual machine, then identifying the malicious features in the normal file, comparing the identified malicious featureswith the features in the malicious file feature library, judging whether the file is a malicious file, cleaning if the file is a malicious file, otherwise extracting a web address in the browser file, judging whether the web address is a malicious web address by using a machine learning model, cleaning if the web address is a malicious web address, otherwise ending the whole process. The invention integrates malicious web site, malicious software and registry information, combines electronic forensics with the safety of virtual machine system to form a complete system, and has higher identification rate.

Description

technical field [0001] The invention relates to the field of virtual machine security protection, in particular to a virtual machine security protection method and system based on big data and machine learning. Background technique [0002] In recent years, there have been frequent major security incidents around the world. The "Prism Gate" incident and the "RSA Backdoor" incident that were exposed in 2013, and the new "worm-like" ransomware WannaCry that broke out in 2017 have aroused widespread attention on information security from all walks of life. Cyber ​​attacks have shifted from the initial spontaneous and distributed attacks to professional and organized behaviors, showing the characteristics of professional attack tools, commercial purposes, and organized behaviors. As profit becomes the core of cyber attack activities, many information network vulnerabilities and attack tools are commercialized by criminals and organizations to make huge profits, thus accelerating...

AI Technical Summary

Problems solved by technology

[0005] The purpose of the present invention is to provide a virtual machine security protection method and system based on big data and machine learning, which solves the technical problem that the current security protection system cannot effectively protect the virtual machine

Images